Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232392e35372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: T7yEqt8KS60z1wlkf6NFeOAo5sYpkqcOdmHGK3lHbYQ=
Subject key identifier: 08:B4:AE:E4:AA:29:8F:80:A5:0E:22:D8:76:38:2F:28:EB:92:C3:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1E35DA9C6CE70DFB4064010E1669105EB3E66D8A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:13 +0000
ROA not before: Sun 30 Aug 2026 21:23:13 +0000
ROA not after: Sun 29 Aug 2027 21:28:13 +0000
asID: 136787
IP address blocks: 185.229.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:35:da:9c:6c:e7:0d:fb:40:64:01:0e:16:69:10:5e:b3:e6:6d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:13 2026 GMT
Not After : Aug 29 21:28:13 2027 GMT
Subject: CN=08B4AEE4AA298F80A50E22D876382F28EB92C379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:40:09:44:5d:1e:8e:6d:d3:1f:92:9b:ce:
53:85:05:06:0c:07:ee:ec:e9:0b:d7:1a:dc:40:c3:
cd:96:c0:a7:5c:bd:93:ba:d3:8b:f8:38:64:c4:5a:
c1:00:9d:04:e9:4a:22:05:9e:7c:77:3e:85:08:76:
e4:74:19:c9:b3:93:cf:7b:c5:a6:67:ad:6a:05:da:
5c:6c:96:b2:29:d1:60:57:fb:48:68:41:81:6f:5c:
34:5f:a1:b6:da:2e:9e:a7:a5:d1:bf:91:8e:99:bd:
4e:c1:04:f0:d8:44:66:1d:da:dc:af:e9:e7:c7:9f:
f7:c5:19:b7:eb:77:46:f0:2b:d2:26:9b:a0:b0:0c:
02:7b:a3:a8:9e:26:3e:af:24:e8:c3:a8:a2:37:e9:
b2:dc:dc:91:b7:0e:72:0f:5c:2a:a8:99:47:0c:78:
fb:e3:2d:96:c6:56:14:99:94:a8:33:b5:91:0a:c4:
57:3d:fb:0c:51:03:1d:40:c4:18:30:d7:22:5c:ee:
d9:c3:b9:11:6f:dc:08:05:12:d1:4f:9d:c2:1f:d1:
41:84:3c:94:2a:30:90:45:93:87:6c:5f:b6:15:c3:
a5:3d:ba:f2:1f:45:70:8d:a8:1d:22:b0:ac:e0:24:
de:af:7d:ab:44:e7:82:62:17:d2:fd:61:0f:a3:88:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B4:AE:E4:AA:29:8F:80:A5:0E:22:D8:76:38:2F:28:EB:92:C3:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a8:86:ed:cc:4c:14:65:53:d8:1a:97:00:f3:05:58:dd:a2:
0a:71:8a:c4:e1:5c:63:cc:85:a0:bd:87:40:71:fa:0d:ab:7c:
30:cb:c2:1f:39:8b:e6:54:3d:b5:c0:9c:f2:0c:cf:44:87:46:
94:1c:91:df:f9:10:fd:17:b6:a1:46:2f:e1:3b:bb:e1:d0:fc:
1b:73:5c:00:a0:70:32:ac:fc:2d:fc:1b:a1:91:72:df:a7:81:
9c:92:4c:28:0b:e2:7c:e9:e6:6d:a7:e4:b8:4f:f4:39:a0:01:
4a:65:64:f1:3a:e8:8e:c3:25:50:0e:7d:1a:7e:f6:c4:e1:5e:
2f:9f:57:76:5e:5b:35:b3:ea:50:18:30:a0:ab:89:09:e7:59:
62:19:5b:8b:be:d6:13:50:d8:50:4d:49:39:6b:fb:eb:b9:4b:
35:8e:00:f2:9e:6d:89:8f:12:2c:8b:ba:bb:9a:98:8b:ab:1c:
56:28:e7:5a:f4:da:9c:4a:a9:49:da:7e:d9:d0:36:c3:35:59:
2c:62:fd:39:5d:61:c8:7f:00:79:ae:e7:f2:e6:03:d4:ef:fa:
3d:75:5b:09:e3:67:c1:58:0a:f1:8d:ae:0f:39:24:ec:74:57:
83:68:58:9d:0f:b5:ac:30:67:32:65:e6:92:c2:25:13:c2:50:
7f:e2:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:23:24 2026 by rpki-client